Welcome to HenKaiPan

HenKaiPan is an Application Security Posture Management (ASPM) platform designed to help engineering teams manage security scans, track findings, and maintain compliance readiness.

Login

What You Can Do

🛡️ Security Scanning

  • Run multiple security scanners (Semgrep, Trivy, Gitleaks, Checkov, Nuclei, and more)
  • Schedule automated scans on cron-based intervals
  • View scan results with detailed execution logs

📊 Finding Management

  • Centralized inventory of all security findings
  • Triage workflow with status tracking (Open → In Review → Fixed → Verified)
  • SLA deadlines based on severity (Critical: 24h, High: 72h, Medium: 30d, Low: 90d)
  • Cross-scanner deduplication via SHA256 fingerprints

📈 Reporting & Compliance

  • Executive reports with risk trends and metrics
  • SOC 2 / ISO 27001 / PCI-DSS compliance mapping
  • Control evidence collection and export

🔗 Integrations

  • GitHub App for PR comments with findings
  • Slack webhook notifications
  • Jira ticket creation from findings
  • Custom webhooks for any event

Quick Start

  1. Create your first Project — Connect a Git repository or add manually
  2. Configure a scan — Select scanners (SAST, SCA, Secrets, IaC, Containers)
  3. Review findings — Triage, assign, and track remediation
  4. Set up schedules — Automate recurring scans

Navigation Overview

Section Purpose
Dashboard Health metrics, onboarding, recent activity
Findings All vulnerabilities across projects
Scans Scan execution, logs, scheduling
Projects Connected repositories, scan history
Compliance Framework mapping, evidence export
Settings Integrations, users, policies, notifications

Next: Dashboard Overview →